CVE-2026-110467
CVE-2026-110467 · WisdomGarden｜Tronclass - Insecure Direct Object Reference
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
CVSS 5.3 · Medium · EPSS 0.3%
- Published
- Updated
Affected products and versions
tronclass
- Versions
- 1.77: Affected (custom)
- 1.78: Affected (custom)
No fix published